==> /var/log/fail2ban.log <==
2016-05-19 02:00:29,517 fail2ban.filterpyinotify[28253]: DEBUG Default Callback for Event: <Event dir=False mask=0x2 maskname=IN_MODIFY name='' path=/var/log/mail.log pathname=/var/log/mail.log wd=2 >
2016-05-19 02:00:29,518 fail2ban.datedetector [28253]: DEBUG Matched time template (?:DAY )?MON Day 24hour:Minute:Second(?:\.Microseconds)?(?: Year)?
2016-05-19 02:00:29,518 fail2ban.datedetector [28253]: DEBUG Got time 1463623229.000000 for "'May 19 02:00:29'" using template (?:DAY )?MON Day 24hour:Minute:Second(?:\.Microseconds)?(?: Year)?
2016-05-19 02:00:29,518 fail2ban.filter [28253]: DEBUG Processing line with time:1463623229.0 and ip:81.2.237.54
2016-05-19 02:00:29,518 fail2ban.filter [28253]: INFO [courier-smtp] Ignore 81.2.237.54 by ip
2016-05-19 02:00:29,521 fail2ban.datedetector [28253]: DEBUG Sorting the template list
2016-05-19 02:00:29,522 fail2ban.datedetector [28253]: DEBUG Winning template: (?:DAY )?MON Day 24hour:Minute:Second(?:\.Microseconds)?(?: Year)? with 2678 hits
# fail2ban-client get courier-smtp ignoreip
These IP addresses/networks are ignored:
`- 127.0.0.0/8
89.40.125.242
66.249.64.0/19
v0.9.4๊ฐ Debian jessie๋ก ๋ฐฑํฌํธ๋์์ต๋๋ค.
๋์์ฃผ์๊ฒ ์ด์?
๋ฌด์ ์ ์ฐจ๋ฅผ ๋๋ฒ๊ทธํ๋ ๋ฐฉ๋ฒ์ด ์์ต๋๊น?
a
๋ฐ b
๋ ๋ชจ๋ 0์
๋๋ค.
https://github.com/fail2ban/fail2ban/blob/master/fail2ban/server/filter.py#L374 -L375
IP๋ 81.2.237.54 ๋ฐ 127.0.0.0์
๋๋ค.
์ด์ ๊ด์ฐฎ์ต๋๋ค.
# fail2ban-client get courier-smtp ignoreip
These IP addresses/networks are ignored:
|- 127.0.0.0/8
|- 89.40.125.242
`- 66.249.64.0/19
์ด์ ์๋ 3๊ฐ์ ์ฃผ์๊ฐ ๋ณ๋์ ์ค์ ์์๊ณ _one_ ์ฃผ์๋ก ์ฒ๋ฆฌ๋์์ต๋๋ค.
ignoreip
๋ํด ์ฌ๋ฌ ์ค ๊ฐ์ ์ง์ํ์ธ์.
์ ๋ ๋ณดํต ์ด๋ ๊ฒ ๋ถ๋ฆฌํฉ๋๋ค.
# localhost
# own IP
# Googlebot
ignoreip = 127.0.0.0/8
89.40.125.242
66.249.64.0/19
2016๋ 5์ 18์ผ ์์์ผ Viktor Szรฉpe๋ ๋ค์๊ณผ ๊ฐ์ด ์ผ์ต๋๋ค.
์ b๋ ๋ชจ๋ 0์ ๋๋ค.
https://github.com/fail2ban/fail2ban/blob/master/fail2ban/server/filter.py#L374 -L375
๊ทธ๋ฆฌ๊ณ i, ip, s์ ๊ฐ์?
์ฌ๋ฌ ์ค ๊ฐ์ ๊ฒฝ์ฐ ignoreip
์ด ํ๋์ ๊ฐ์ ์ป๋๋ค๋ ๊ฒ์ ์์์ต๋๋ค. (3์ด ์๋)
ignoreip="127.0.0.0/8
89.40.125.242
66.249.64.0/19"
๋ฒ๊ทธ๋ผ๊ณ ์๊ฐํฉ๋๋ค.
2016๋ 5์ 18์ผ ์์์ผ Viktor Szรฉpe๋ ๋ค์๊ณผ ๊ฐ์ด ์ผ์ต๋๋ค.
์ด์ ๊ด์ฐฎ์ต๋๋ค.
# fail2ban-client๋ ํ๋ฐฐ-smtp ignoreip ๋ฐ๊ธฐ
๋ค์ IP ์ฃผ์/๋คํธ์ํฌ๋ ๋ฌด์๋ฉ๋๋ค.
|- 127.0.0.0/8
|- 89.40.125.242
`- 66.249.64.0/19์ด์ ์๋ 3๊ฐ์ ์ฃผ์๊ฐ ๋ณ๋์ ์ค์ ์์๊ณ ๋ค์๊ณผ ๊ฐ์ด ์ฒ๋ฆฌ๋์์ต๋๋ค.
ํ๋์ ์ฃผ์.ignoreip์ ๋ํด ์ฌ๋ฌ ์ค ๊ฐ์ ์ง์ํ์ญ์์ค.
'ignoreip' ๊ฐ์ด ์์ผ๋ฉด ์ถฉ๋์ ๋ํ ์ง์์ ์ถ๊ฐํ๋ ๊ฒ์ด ์ข์ต๋๋ค.
IP ์ฃผ์/๋ง์คํฌ์ฒ๋ผ ๋ณด์ด์ง ์์ผ๋ฉฐ ์ง์์ ์ถ๊ฐํฉ๋๋ค.
์ฌ๋ฌ ์ค ;)
๊ฐ์ฌํฉ๋๋ค.